5812872a1cfa2c88dd7477881ee7e4015b237f35ad7cb9b3d930d291d560e6a1

Analysis

max time kernel
84s
max time network
93s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
17-01-2025 03:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

freerobux-9-8.apk
Size

9.2MB
MD5

cb15257128695991a490b70a32e2e9f0
SHA1

d5bd6500ae07fe8651956da78bdae50bcb1ac4bf
SHA256

5812872a1cfa2c88dd7477881ee7e4015b237f35ad7cb9b3d930d291d560e6a1
SHA512

405edd8363992e9c918a57fedf497172c64579fbab0894d8ce221a6208d5936f758188c31ac822fb34d598e7b03af69927d7a3c07123c6205f94f6da1e058981
SSDEEP

196608:mO4rYye2J4LHATYmx3ynDstkgGdrjjVUntcOEZdZ7OEf6SZ:m1YyT4LgjCDgUrjZyi

Score

7^/10

collection credential_access discovery evasion execution impact persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/freerobux.appkh/files/audience_network.dex	4315	freerobux.appkh

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	freerobux.appkh

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	freerobux.appkh

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	freerobux.appkh

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	freerobux.appkh

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	freerobux.appkh

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	freerobux.appkh

freerobux.appkh
1⤵
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Acquires the wake lock
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4315

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/freerobux.appkh/databases/appnext_dbs472

Filesize
36KB

MD5
06ee145d3eebeea1096d1a646137148a

SHA1
470c754ff48596424c018c0d5c1b45db9cd66da9

SHA256
8be0aeb6af28ddd1c3137b5e4cc5faffec6715f72750bb63992d362261eddbfc

SHA512
e4c666f8b4ae5d4fd3b45f0a82f15eb5fc8d0bc9e7999885236b829f665fcaf062ff79899bcb1dfcc84ad502e78e315fce4d5497992f520a35785cc914c9b250

Download Submit
/data/data/freerobux.appkh/databases/appnext_dbs472

Filesize
20KB

MD5
5846d676140af827237ab3d92144f823

SHA1
ae5e13a53e0a77de880e7a526422f3813a8a804e

SHA256
599aafa03628e1d79e81c74ae1695abff87d0307f57e972de93ed87fb91061af

SHA512
ed773904aa516b8aec5768e87a8e580d24bc7a7c4aa87ccdea58b0479874fd9aa0404ff498dbc800f437b333625bf6b9b5e027c404d1f5453f808c4c3d6d1454

Download Submit
/data/data/freerobux.appkh/databases/appnext_dbs472

Filesize
20KB

MD5
7e7ba29ef5af839727450b05ccd47832

SHA1
04a5ba126d075af5ebe560fd3f2131aa1fc64334

SHA256
a4934a62cd1268d4403ee80f99a777f1cdad05b8b82d9a18ea2ba44104adb305

SHA512
2dddda30e636d84c066bc5632c2045081c582b88360a8de7769540b8c3984c98d4cfe510b4834483081b2319760562dcc876aaa6fd9e3e7a3b88f440b70901ef

Download Submit
/data/data/freerobux.appkh/databases/appnext_dbs472

Filesize
36KB

MD5
7ddf22f2250e89b03bf3cbbdd1dc1c8a

SHA1
ae791fb9244f728d189f8917cd9ee40762b7990a

SHA256
e7b41edd5fda8969a06be2e87a5b7e2bc55c00a2c1f6ca889d52af8fe2310494

SHA512
f52bcef5434cdf3e877dcf0cd9270dde95a58897442f8fcc5dc05aaec80d38af656611c19f3dccc89a2065e7b7e0fd1925a7522b6d06a1a337bdeffe24ccd307

Download Submit
/data/data/freerobux.appkh/databases/appnext_dbs472

Filesize
36KB

MD5
54e4a13f6635c4917470465ecf813611

SHA1
1669019be650d76ea85d6efb04295f7f0a412aa1

SHA256
a031253858d57757f5693ec62cc2e520aaddf9c8846b22d0e41596501880db27

SHA512
f70e15d92ad8cc79dad396ddd85a9f6158aca4a059701c9baf57ebc13724c0bd37489969b78eab2681476d083d6802b0cf678567c4bd8df345ecd9f087b0d0b3

Download Submit
/data/data/freerobux.appkh/databases/appnext_dbs472

Filesize
36KB

MD5
aeb04c113cdf1765944aa61f591d0a8d

SHA1
43ef1cd15821235b2c96dc33576e3cd2ef809bb5

SHA256
fb58392fa6b17bd4eea99cc226ff3bf6bbc586febd99d19b1e3993c7060b7132

SHA512
b736eb288fdae7d428dc6681c96cde452bd2b6d7bb153e3bc9dfeca1ef509fe4d84927a985ae9dbe9fda683cb0cb61a880abd79ce309a7031e1d0c7c8eb6840b

Download Submit
/data/data/freerobux.appkh/databases/appnext_dbs472-journal

Filesize
512B

MD5
812ac725b680ea73dee523ca1ae6e1c8

SHA1
d85d3837679103ac13bdc8bf8ff8e738846d6cd9

SHA256
995f8ce92ab0c0e950407b3966525722e095f5ad04053cedd42f39a3ab34bf75

SHA512
c165e9256d44a86c20268ccf572a40e1fe63f70ec1738c15e508fcac29c0cf2f6ace2dceb9b477941f0e5ffae33b331b7349eae21cd4a3b119bf95accdb506af

Download Submit
/data/data/freerobux.appkh/databases/appnext_dbs472-journal

Filesize
8KB

MD5
59538550a7c0711b902127b7d8e23220

SHA1
f6f49483aad928de08f44bf76822f4df23d0cb2d

SHA256
f4e778e9b6d44b3cc0352df223d9c2792c8c39105abc300b541a9f1e49c3727d

SHA512
ea54a48475dfb644dd6317fd37c521b83f8748477b83c8f323f17f3e748fa6f6e8490b2100c3b7596a82b4f4726a370a831f83d63f44d409414ba913acc43d9f

Download Submit
/data/data/freerobux.appkh/databases/appnext_dbs472-journal

Filesize
8KB

MD5
98a902555df4b5056c0b58b3a1197bba

SHA1
4ff4cabf14c90f666a881bbd31507481a6036b62

SHA256
a848abc32856e23a4038cc239fbf4e6d182d972531a253039391b6872fe6da5d

SHA512
2e3830df73304d2cc6bb7d3ffd688b0947075f309da73246accbb4184c907dc4193dc4ea3593f38d6326d135242e79eb20adcf5291f54eb7746efa457b046ea9

Download Submit
/data/data/freerobux.appkh/databases/appnext_dbs472-journal

Filesize
8KB

MD5
66b8c02dd996bb3f48caabe38408c728

SHA1
f4fe25087198d3be18af8080b0779dc7ef416d82

SHA256
8141a6f946a8c5c2f0b4d0597b6aaf3992da3a77abba485ab0c9a34af053d03f

SHA512
57163326dc561ee5dccaed7fabe2413e533fa3d891530d02d26297b45b4dac4e724de2eccfe6e6f45860a95d2d534cc7bd4344ab545b24f692a4218695a130a0

Download Submit
/data/data/freerobux.appkh/databases/appnext_dbs472-journal

Filesize
8KB

MD5
477f11d365c43660ee8a32d757d8987e

SHA1
cded2cb6aad0d7d975d1c0e258ca4dce093dfe60

SHA256
11032d96b08c964fbec86338d04a2824024878fc296f924e25e8e52c443f25f7

SHA512
67507651461f858f5d74442aa01179638a53b4e160d3123da54dd5ca76d2f377babe79bf7d42b1823a5de6dab6d38e737375696c5dfcf4f8f7b2bd4861485a00

Download Submit
/data/data/freerobux.appkh/databases/appnext_dbs472-journal

Filesize
12KB

MD5
3f1e2bbceb29e5469260b6879a1ed494

SHA1
bedac57a3dfdb31bfdaa2e083706cecda42e084e

SHA256
5518c2ded8d8b44283bea70f8682e298ac986effa41fdca75139204da44ffca2

SHA512
8950618ec1ae9c199721948352111261a1943fcd3a293d3b9da13eeafca8821a532751f49bc552eb37b78a03633a8d175ef9c368414dc6e487b6f3cdf42a5e45

Download Submit
/data/data/freerobux.appkh/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f261310dfadaaa77901da36702630a53

SHA1
e3d409ce220b72d08a104583f4dbac9cac25b830

SHA256
46748552317af101f3c02f0731e47354fe51107cdfa28a16986dbd6e586eabb8

SHA512
44b7dddd752df36ab9615b5459803198fbdfc674cfdbbd1a297b36774082cf4d794b4423e756a1cb4518f2e97697af3a59f1f46b1b01c46d52fd27729e17d6ec

Download Submit
/data/data/freerobux.appkh/databases/google_app_measurement_local.db

Filesize
16KB

MD5
67e081125b7538fc25003a8d598e760e

SHA1
afcca3157d70568a21db5b5e3e940aa97ee336ad

SHA256
26976192995dc35abea5b1625b9295c08e8ce6329cd412d8174497424e07f1d3

SHA512
ddb4acfaa22cc96197284b7538d4ddf5f57426bb210845d7f7bda53357693e7fa28572d18c7b3e64e75ff8b2e2dfcd3a450206a2f225d5e55e730535c0120302

Download Submit
/data/data/freerobux.appkh/databases/google_app_measurement_local.db

Filesize
16KB

MD5
ec46abcfbc81333ea2fd9018d72b198a

SHA1
4653ed4175d5326b6fa413fa7a62a3d4c67f1111

SHA256
35f11e27327f2343e96cb131a0df2967e2632a3892c01ff9cabdee0e105b21b3

SHA512
419e0c0804ff518dcbf9810cd41d528326a3ef1f4d37781d941590e1944cc29ae680c70af52914969eca7fd5642030e707c6ce07aa0c58167922f52e79546876

Download Submit
/data/data/freerobux.appkh/databases/google_app_measurement_local.db

Filesize
16KB

MD5
681d665222e1433635e32714aa2fed23

SHA1
ec0ad8bf1e5ed292d9d0f06b2a75e36aacc21f50

SHA256
86bb1912f3f6ab8d189506e2c5a744768b3154a719c2759efeec8219ff6a1698

SHA512
10d53c982bc48efe4dd69aaf3d1c1a0a0e05124799aedb3705cfa31c31e622e6360a26f406e9d1c45f54a984395b3b892ad7331b12db2c02afddc6cb705b993c

Download Submit
/data/data/freerobux.appkh/databases/google_app_measurement_local.db

Filesize
16KB

MD5
061997af4873f90457fe6754fb8e3562

SHA1
a7a8e723aadfc482c62e9124ca6db8bda9a426a9

SHA256
1cefb5621c27a232c8eb4b77ea96942f4e4c18916b5a5b1b026bab3085c5c0d0

SHA512
1900282e187a6779d7f76301f5542438d71fb26683c366284f5cf8dae8dc6a25ff42fdee1daaf91ef93f1f3f6d4e1542c5e33dbc2e60268e33baf9d40c5135cb

Download Submit
/data/data/freerobux.appkh/databases/google_app_measurement_local.db

Filesize
16KB

MD5
41082ba378a8e29ae9013c4913a52f7f

SHA1
4ea055d681ccd9c101cfcbd8fa97cc3ef01cad44

SHA256
627b1845e9bf0fdbe6b77067c2d2e81b3927f7e80e17d6273408a835cbce7b9b

SHA512
745f9b241801971204dc94ca9bc717f5cc99312bb261ffeaccc19dee1c0ee00f905bbb11ce2cb2ad4aa2d47c2ab15a2f4f63595368592a1ab792d1d1a123d5c9

Download Submit
/data/data/freerobux.appkh/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
ab18b1a74b455593c64a131a07c8ef95

SHA1
6dbed41d52ab7a857682fb629441461be5ebdaa6

SHA256
680312ba64e18cf5bb0acbda30631194f1c89833f518f95cf6f0da0afc0b4e74

SHA512
972d8fa4e7249a9662956c8002360f528abf49c79f0596b90c61cfee095258863ae7635faacf19c0e2e755cd548703a769078676a0b36613a86e0f9b073555da

Download Submit
/data/data/freerobux.appkh/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
e6bf0068e778191f3a7a3d6c28d2caf1

SHA1
870713cb2ddf64784dac794eec55406cc1f7b192

SHA256
aeec7853b7569d3e8cb88101bcc779b64c2e194b68928d957128cd10f17cde83

SHA512
9f310f105326a47f80a66a51cff7345d6b47506663e60f7bb251fb59d5c85a8865854ace814734c8b07005b0d13de5608317562349546a8c3791f36be2f7c94a

Download Submit
/data/data/freerobux.appkh/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
7cd9aca47307d65e775f48abbb779893

SHA1
ad7a007f10b12e39810ddbdd600554f7e02a5640

SHA256
fd5ea8070a77909abf52f781965ba99cb60024f8df8b3961a3c1ecef46560a90

SHA512
0575f5d31b9d1e3e58aa4df3298ff2d653a60786bd4651e8374e04d582dee426abecfad746bcc59fe385a69f3b1860678142bae947f17e14184e250d4b5003e0

Download Submit
/data/data/freerobux.appkh/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
0453b0314e7b5c117713428ea1749cc1

SHA1
7ad18c634ca3abe45937fa066f3cdc3d1c56a23f

SHA256
f63a098f0f5d467445d88d30a21c1955cb63add0b462adb6a8aa7fa1f8da1ce4

SHA512
e1b46a1c2df4841cb0f99e6ccd34fb16ef7bc3b4c9a92fbd7cb82b31eca8251c86eb4264e07606dc88dcf503a088dcaf4c18588cdc8fb9bf4b3ed20256187549

Download Submit
/data/data/freerobux.appkh/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
d5072860935272189e65e76ef9fcbf4d

SHA1
9082cde2758703c43890cf46ab03ce11c68d868c

SHA256
33a5bb8b7011f7140f50ec4d4d2c04945636c9d0fbce91a7d4fcccfee47d1614

SHA512
b8de446133d458052870e292e1f5b5d30ac63b613f6bd1ba2c6610c0582fcbc8a523467c75b7af5802e5ad8d24046552df590b51679de59f84aa52cdac2cd9a8

Download Submit
/data/data/freerobux.appkh/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
a8ee07cb21393e4f535eb54246edd5eb

SHA1
baa716872629329179221413f5048ed34ed9d324

SHA256
e9e63830e74125fcccc1872079bfe0997dc3c0a4d4233e2436e9d5ce954dda86

SHA512
0df4baf816bfe5d96f873f8eb736a37d4011926e7ff2294a739b850110647c1ff517824ac7be0a6151b22abb46ef5b5d02488678a64dbbbcd85832e49624c159

Download Submit
/data/data/freerobux.appkh/files/audience_network.dex

Filesize
3.2MB

MD5
4905ee4caebdf455b9debee76ea89cae

SHA1
461d5626e22bd87e0f0afa3440d5ce61d2363571

SHA256
0bfad0c78e6e439d2c70d43568d1dc541bff8d4b4c5bfda9e81e03ae790dd864

SHA512
89bce0984264008e30a635852cbd3ba0c822b0917525a9029ff029a33409c161dad0f60ccf67406bea62e3d42ce0364250f3a9f502db8bbcaeba277787b2fc3f

Download Submit
/data/data/freerobux.appkh/files/oat/x86_64/audience_network.vdex

Filesize
58KB

MD5
bf25ac24c18fd9aaea777714fcef9d5e

SHA1
bb7f96ac21b4472e8b247a7e28ad9c992beaa6f2

SHA256
f9351667f50014f90fef5e8cd9238e4b77db2e316aa160a56329c4661ed4af0f

SHA512
5fd9737a7949689891a7c2a34dcd630b73b79f9b68e11af824e853233a3a2d91fc74c94b5f423749f89c629bdf7940827404594b7dae1199f4a4d92cdb2cd996

Download Submit
/data/data/freerobux.appkh/files/vinebre_ac.txt

Filesize
19B

MD5
6ba414de84c9ff3865cc95bef5807df6

SHA1
2530d7553cab2aec24efa0e9a8b2bc2a8f49f7ec

SHA256
ef32bb09754d228756385169fd1a0a91e025d115e7b3dcc9e6c2136e66e95d0e

SHA512
0a6cce2213eabab29cf72acb3351993417aba92efa89dec2809b7bddc168d0df3c14fcc7bc1046ba8e7197b2f6b0c22d960b710df2d01ef7fb1978d7d5d96869

Download Submit
/data/data/freerobux.appkh/no_backup/com.google.InstanceId.properties

Filesize
2KB

MD5
b660889e839bcceb22e664e838436a91

SHA1
e926d388aaa08789220a8bfac3c7a3631522cb6e

SHA256
498d2470317ac751f08f1bb1bc9d5af9d22bd140f3ff94852c357e813af4b734

SHA512
bc3f8ce7dc8524de2f4023d5d3b68db9f72bcdbb6471142a7c6dd98b1204c3e185d5b3e7b9703c64221d1eadda97d4247a49fa480de1b38261076cfbf3f27202

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads